Authenticated Evidence and Whistleblower Account Expand RansomHub Debt-Settlement Investigation

NewsfromtheDW’s investigation into the RansomHub-related U.S. debt-settlement cybersecurity matter has expanded beyond ransomware material.

Published evidence now includes corporate and operational records, documentary and photographic material, a firsthand whistleblower account, and authenticated audio and video involving individuals associated with organizations within the network.

NewsfromtheDW reports that participant identities in the recordings were independently corroborated through additional visual and documentary evidence.

The recordings contain conversations relevant to questions concerning knowledge of the alleged cybersecurity incident, handling or disclosure of information, communications involving the whistleblower, proposed financial compensation and employment, and statements concerning alleged threats toward the whistleblower.

Earlier reporting also documented redacted ransomware material, internal records, consumer information, RingCentral records and client-portal credentials associated with interconnected U.S. businesses and Jordan-based operations.

The investigation therefore centers on a direct question:

Who knew about the incident, when did they know, and what happened afterward?

Organizations and individuals materially referenced in the investigation have been given an opportunity to respond, with a published response deadline of September 28, 2026.

A failure to respond is not being treated as an admission.

NewsfromtheDW’s investigation and supporting reporting can be followed across its WordPress, LinkedIn, X, Blogger, Substack, Tumblr and Telegra.ph publications.

SOURCES & ORIGINAL REPORTING

Source: NewsfromtheDW — WordPress
https://newsfromthedw.wordpress.com/

Source: NewsfromtheDW — LinkedIn
https://www.linkedin.com/company/newsfromthedw/

Source: NewsfromtheDW — X
https://x.com/Newsfromthedw

Source: NewsfromtheDW — Blogger
https://newsfromthedw.blogspot.com/?m=1

Source: NewsfromtheDW — Substack
https://newsfromthedw.substack.com

Source: NewsfromtheDW — Tumblr
https://www.tumblr.com/communities/newsfromthedws

Source: NewsfromtheDW — Telegra.ph Investigation
https://telegra.ph/Debt-Settlement-Cybersecurity-Claims-USJordan-Operations–Newly-Authenticated-Evidence-09-16

NewsfromtheDW investigation examines authenticated recordings, whistleblower evidence and U.S.–Jordan operations connected to RansomHub debt-settlement cybersecurity claims.

NewsfromtheDW, RansomHub, RansomHub data breach, debt settlement data breach, debt settlement cybersecurity, whistleblower, cybersecurity investigation, consumer data breach, U.S. Jordan operations, Jordan call centers, financial services cybersecurity, Liberty Debt Relief, Lending Tower, Fone Fluent, WUDUH, Clarity Debt Resolution, Black Oasis, Credi Care, Progress Law, data privacy, consumer protection

#NewsfromtheDW #RansomHub #DataBreach #Cybersecurity #DebtSettlement #Whistleblower #ConsumerData #DataPrivacy #ConsumerProtection #Jordan #UnitedStates #FinancialServices #CyberCrime